Creating a Privacy Policy Part V

final article in writing a privacy policy

to Security |

 בע"ה

Hello and thank you for reading this final installment in the How to Create a Privacy Policy series of mine.

Here is what we accomplished so far:

Sample Privacy Policy

 

Purpose:  To define privacy expectations of visitors to the ArielSilverstone.com website.

What We Collect and How

We respect the privacy of our visitors.   We generally do not collect personally-identifying information on this website.   We do, however:
a) Employ certain automated tools that collect statistical information visitors to our site.
b) Provide you with the option to leave comments, or contact us, by entering your email address and, optionally, other contact information as you may choose to share with us.
c) From time to time, we may offer you to opportunity to participate in surveys or polls, and we may be provided with such information as you choose to provide us.

Cookies

In general, we do not use persistent cookies, unless you request that our site remember you.   Other cookies that we use are session based and expire or set to be deleted when you close your browser window or restart your computer.  Our cookies are not made to be read by other sites, and maybe refused by setting your browser options to do so.  Refusing some cookies may alter your site experience, and especially movement between pages that require authentication.  We do not use the values stored in cookies for any other purpose beyond those declared above, in the What we collect section.

How Do We Use Information We Collect

We use the privacy-related information we collect solely to deliver the services referenced on the website.  We do not currently, nor do we have plans to, sell or license any of the collected information to any other party, in any form.  From time to time we may evaluate items such as reach, content, theme and language and use statistical information to improve on our content.   We may also use collected privacy-related information to communicate with you, in sole relation to the services provided on and referenced by this website.

The sole exceptions to our policy are if we are ordered by a court of competent jurisdiction, or related law enforcement agency, to reveal such information; or to prevent what, in our sole good-faith discretion, might constitute a credible threat to your life or health or to the life or health of others.

Today, we will end the series by discussing updates to our privacy policies.  I postulate the following rule:

Ariel’s Privacy Rule #6: Decide IF you want to give a "heads-up" before changing your policy and, if so, how you going to achieve that and stick to it.

Currently, very few rules demand prior-notification to your visitors about changes to your privacy policy.  It is also true that policies ought to be revisited, reviewed, and adjusted from time to time.   That said, it would be "wrong" if, for example, we promised our readers to email them before change and then we did not follow through.  I have seen quite a few site that had a "we shall let you know if you only register" policy, only to replace it, post-change, with "come visit us and we will show you" that the privacy policy was changed.   Besides being wrong, it might also put you in hot water legally.

I therefore suggest the (Again, simplest) manner of announcing privacy policy change:

Changes to our privacy policy

From time to time we may change our privacy policy.   The best way to find out about such changes is to visit our site and look at this policy again.  We date our policies, so you can easily ascertain when it was last changed.

And that's it.  We do not ask

Continue Reading

Print

Browse CIO Blogs

See all CIO Blogs »

Cloud computing has emerged as one of the most significant game changers to hit the technology landscape in the past 20 years. With this massive expansion of the cloud, the perception of the IT organization is shifting from a utility player to a change agent. This eBook breaks down five ways progressive organizations are using cloud-based IT Management solutions to help drive innovation and become more strategic, including: adding visibility and analytics, speeding up time-to-value, lowering costs, improving prioritization, and providing a blueprint for future cloud deployments.
Read the white paper to see how IBM helped Citigroup deliver new services and enhancements to their 200 million customers faster.
There are 3 ways to modernize legacy applications: rewrite completely, acquire packaged solutions or migrate existing code. This paper explains why it's best to migrate and how IBM® Rational® software can help.
Accommodating specific lines of business can result in a hybrid ecosystem of applications and servers. The resulting complexity of this architecture makes for an environment that is costly to maintain and difficult to change when addressing new challenges.
This whitepaper will help you to define a mobile device passcode policy. Security managers must attempt to reconcile two opposing goals. They must: 1) create a passcode policy that is strong enough to protect the device if it is lost or stolen, while: 2) not annoying users with needless length or complexity.
This whitepaper, authored by The Radicati Group, looks at the key reasons organizations should consider moving to a cloud-based archiving solution. Email archiving solutions enable organizations to store, monitor, and collect electronic data exchanged by their users to comply with internal policies and regulations.
ATERNITY will showcase a 30-minute demo on how Fortune 500 companies are leveraging its award-winning FPI Platform to deliver a user-centric approach to Proactive IT Management.
For businesses to move forward and tap into the ever-expanding universe of Internet users and network-enabled devices, it's critical to learn how to make the transition to IPv6. Learn the critical steps your organization must take to make a seamless transition-and keep your business world connected.
Learn how IT teams can protect against spear phishing tactics. Harry Sverdlove, chief technology officer of Bit9 offers a frank discussion about spear phishing - the most common technique used in today's advanced attacks.
Learn how to build a solid business case for your migration to Red Hat Enterprise Linux so you can run leaner, innovate faster, be more flexible and own the New Now.
Social media isn't about you; it's about everything around you. As you consider how your customers want to communicate with you, social media is something that can't be ignored. But what should your strategy be? Is social media "just another channel?" What kind of a plan makes sense for your contact center and for your customers? Join our experts as they share their insight and research results.
Hardware tokens were a popular method of strong authentication in past years but the cumbersome provisioning and distribution tasks, high support requirements and replacement costs have limited their growth. The additional log-in steps that hardware tokens require and the resulting user frustrations have limited adoption and make them impractical for larger scale partner and customer applications.

Newsletter Sign-Up »

Receive the latest news test, reviews and trends on your favorite technology topics

Choose a newsletter
  1. View all Newsletters | Privacy Policy